Universal Access To All Knowledge
Home Donate | Store | Blog | FAQ | Jobs | Volunteer Positions | Contact | Bios | Forums | Projects | Terms, Privacy, & Copyright
Search: Advanced Search
Anonymous User (login or join us)
Upload

Reply to this post | Go Back
View Post [edit]

Poster: Administrator, Curator, or Staffbrewster Date: Jul 14, 2003 2:25am
Forum: sflan Subject: tunneling

Friday we had a few folks get together to talk about SFlan software 2.0. Tunneling looks like the killer next feature.

A tunnel is a way to have an SFlan node connect to home base (at the archive) while passing over foriegn networks. What this will allow us to do:

* use people's dsl lines as a backup, transparently (no change of ip addresses etc)
* talk with bob Glushko house (it is connected to barwn, so again another foreign network)
* allow us to build a node as an island before it is connected wirelessly to the backbone (again using the foreign network as the primary source of Internet connectivity)

This seems to require figuring out tinc and ostp. jurgen and jim shankland will be looking into this.

-brewster

Reply to this post
Reply [edit]

Poster: Jacob Appelbaum Date: Dec 15, 2003 9:45pm
Forum: sflan Subject: Re: tunneling

I think that for tunnels, you should either use IPSEC or OpenVPN.

It seems like the rest of these open source VPNs are no good and are broken (from a working well standpoint and from a security standpoint).

Here is a paper that Peter Gutman wrote about CIPE, tinc and vtun: http://www.mit.edu:8008/bloom-picayune/crypto/14238

Here is an email that I wrote in response to the Gutman paper and it's acceptance in the OSS/FSF community: http://www.politechbot.com/pipermail/politech/2003-September/000038.html

Terms of Use (31 Dec 2014)